Month Of Abysssec Undisclosed Bugs – ASPMass Shopping Cart suffers from a file upload cross site request forgery vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/94406/moaub30-aspmass.pdf
Source: https://packetstormsecurity.com/files/94406/Month-Of-Abysssec-Undisclosed-Bugs-ASPMass-Shopping-Cart.html